DevSecOps Security Engineer — Cloud, CI/CD & IaC

Fisher Investments; Tampa, Northern (FL, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

100% paid medical, dental and vision

50% 401(k) match

20 days PTO + 10 holidays

Family support programs include paid p

Hybrid work from home program

Job summary

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to help secure CI/CD pipelines and cloud workloads across our technology landscape. You will build and operate security services (GitHub Advanced Security, CNAPP), align with standards (NIST/CIS/ISO), and drive automation through IaC tooling.

You will partner with Information Security, Technology, and Governance teams to reduce risk, implement secure coding practices, and contribute to enterprise-wide security posture

Qualifications

• 5+ years of professional experience in technology or information security.
• 2+ years hands-on DevSecOps engineering with security automation in software delivery and cloud environments.
• Experience with Azure or AWS cloud infrastructure and containerized workloads.
• Knowledge of CNAPP products and cloud security posture management (CSPM).
• Familiarity with IaC and policy-as-code management of cloud security policies.
• 1+ years with GitHub Advanced Security, GitHub Actions, Terraform, or comparable tools.
• Experience with secure coding in C#, Java, Python, or comparable languages.
• Bachelor's Degree in Computer Science or Technology or equivalent experience.

Responsibilities

• Develop and manage the configuration, maintenance, and operations of DevSecOps-related security services (e.g., GitHub Advanced Security, CNAPP).
• Secure CI/CD platforms and implement pipeline security practices, controls, and vulnerability response with various teams.
• Assess cloud security posture and correlate findings from source code to cloud workloads; propose risk remedies.
• Develop secure coding, cloud security, and architecture standards per NIST, CIS, ISO, and other standards.
• Standardize processes and automate security controls via coding and scripting.
• Support CNAPP configuration as code and policy-as-code in CI/CD pipelines (Terraform/IaC).
• Create architectural diagrams and implementation plans for initiatives.

Skills

DevSecOps

Security automation

Cloud security

CSPM

IaC

NIST/CIS/ISO

Python/PowerShell

Education

Bachelor's Degree in Computer Science or Technology

Tools

GitHub Actions

Terraform

Kubernetes

CNAPP

Job description

Fisher Investments is seeking an Information Security Engineer (DevSecOps) to help secure CI/CD pipelines and cloud workloads across our technology landscape. You will build and operate security services (GitHub Advanced Security, CNAPP), align with standards (NIST/CIS/ISO), and drive automation through IaC tooling.

You will partner with Information Security, Technology, and Governance teams to reduce risk, implement secure coding practices, and contribute to enterprise-wide security posture